@multiplatform.one/keycloak 6.4.2 → 6.4.3

package/dist/cjs/index.cjs

@@ -897,9 +897,20 @@ function KeycloakProvider({
 
 // src/frappeToken.ts
 var cached;
+var pending;
+var signedOutUntil = 0;
+var SIGNED_OUT_COOLDOWN_MS = 15e3;
 async function getKeycloakBearerToken() {
   if (typeof window === "undefined") return void 0;
   if (cached && cached.expiresAt - 6e4 > Date.now()) return cached.token;
+  if (Date.now() < signedOutUntil) return void 0;
+  if (pending) return pending;
+  pending = fetchToken().finally(() => {
+    pending = void 0;
+  });
+  return pending;
+}
+async function fetchToken() {
   try {
     const res = await fetch(`${window.location.origin}/api/auth/get-access-token`, {
       method: "POST",
@@ -909,11 +920,13 @@ async function getKeycloakBearerToken() {
     });
     if (!res.ok) {
       cached = void 0;
+      signedOutUntil = Date.now() + SIGNED_OUT_COOLDOWN_MS;
       return void 0;
     }
     const data = await res.json().catch(() => null);
     if (!data?.accessToken) {
       cached = void 0;
+      signedOutUntil = Date.now() + SIGNED_OUT_COOLDOWN_MS;
       return void 0;
     }
     cached = {
@@ -923,6 +936,7 @@ async function getKeycloakBearerToken() {
     return cached.token;
   } catch {
     cached = void 0;
+    signedOutUntil = Date.now() + SIGNED_OUT_COOLDOWN_MS;
     return void 0;
   }
 }

package/dist/esm/index.js

@@ -840,9 +840,20 @@ function KeycloakProvider({
 
 // src/frappeToken.ts
 var cached;
+var pending;
+var signedOutUntil = 0;
+var SIGNED_OUT_COOLDOWN_MS = 15e3;
 async function getKeycloakBearerToken() {
   if (typeof window === "undefined") return void 0;
   if (cached && cached.expiresAt - 6e4 > Date.now()) return cached.token;
+  if (Date.now() < signedOutUntil) return void 0;
+  if (pending) return pending;
+  pending = fetchToken().finally(() => {
+    pending = void 0;
+  });
+  return pending;
+}
+async function fetchToken() {
   try {
     const res = await fetch(`${window.location.origin}/api/auth/get-access-token`, {
       method: "POST",
@@ -852,11 +863,13 @@ async function getKeycloakBearerToken() {
     });
     if (!res.ok) {
       cached = void 0;
+      signedOutUntil = Date.now() + SIGNED_OUT_COOLDOWN_MS;
       return void 0;
     }
     const data = await res.json().catch(() => null);
     if (!data?.accessToken) {
       cached = void 0;
+      signedOutUntil = Date.now() + SIGNED_OUT_COOLDOWN_MS;
       return void 0;
     }
     cached = {
@@ -866,6 +879,7 @@ async function getKeycloakBearerToken() {
     return cached.token;
   } catch {
     cached = void 0;
+    signedOutUntil = Date.now() + SIGNED_OUT_COOLDOWN_MS;
     return void 0;
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multiplatform.one/keycloak",
-  "version": "6.4.2",
+  "version": "6.4.3",
   "description": "keycloak client for multiplatform.one ecosystem",
   "keywords": [
     "auth",
@@ -54,8 +54,8 @@
     "@better-auth/expo": "^1.6.9",
     "better-auth": "^1.6.9",
     "jwt-decode": "^4.0.0",
-    "@multiplatform.one/store": "6.4.2",
-    "@multiplatform.one/keycloak-js": "6.4.2"
+    "@multiplatform.one/keycloak-js": "6.4.3",
+    "@multiplatform.one/store": "6.4.3"
   },
   "devDependencies": {
     "@tamagui/build": "2.0.0-rc.41",
@@ -70,15 +70,15 @@
     "react": "19.2.5",
     "typescript": "~5.9.3",
     "vitest": "^4.1.5",
-    "@multiplatform.one/config": "6.4.2",
-    "@multiplatform.one/logger": "6.4.2",
-    "@multiplatform.one/platform": "6.4.2",
-    "@multiplatform.one/test-utils": "6.4.2"
+    "@multiplatform.one/config": "6.4.3",
+    "@multiplatform.one/platform": "6.4.3",
+    "@multiplatform.one/logger": "6.4.3",
+    "@multiplatform.one/test-utils": "6.4.3"
   },
   "peerDependencies": {
     "react": "^19.1.0",
-    "@multiplatform.one/logger": "^6.4.2",
-    "@multiplatform.one/platform": "^6.4.2"
+    "@multiplatform.one/logger": "^6.4.3",
+    "@multiplatform.one/platform": "^6.4.3"
   },
   "optionalDependencies": {
     "expo-linking": "^55.0.15",

package/types/frappeToken.d.ts

@@ -12,8 +12,16 @@
  * and socket handshake — the same transport native uses. The bench's
  * frappe_keycloak auth hook validates the JWT against the realm public key.
  */
-/** Returns a valid Keycloak access token, or undefined when signed out. */
+/**
+ * Returns a valid Keycloak access token, or undefined when signed out.
+ *
+ * Anonymous visitors get a single 401 per cooldown window instead of one per
+ * concurrent data request: parallel callers share the in-flight fetch, and a
+ * signed-out answer short-circuits further attempts for a few seconds. A real
+ * sign-in arrives via the OAuth redirect (full navigation), which resets this
+ * module state anyway.
+ */
 export declare function getKeycloakBearerToken(): Promise<string | undefined>;
-/** Drop the cached token (sign-out). */
+/** Drop the cached token (sign-out / fresh sign-in). */
 export declare function clearKeycloakBearerToken(): void;
 //# sourceMappingURL=frappeToken.d.ts.map

package/types/frappeToken.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frappeToken.d.ts","sourceRoot":"","sources":["../src/frappeToken.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,2EAA2E;AAC3E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmC1E;AAED,wCAAwC;AACxC,wBAAgB,wBAAwB,SAEvC"}
+{"version":3,"file":"frappeToken.d.ts","sourceRoot":"","sources":["../src/frappeToken.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAUH;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU1E;AAuCD,wDAAwD;AACxD,wBAAgB,wBAAwB,SAIvC"}